Bypass Vulnerability in Trend Micro Antivirus for Mac 2020
CVE-2020-25777

5.4MEDIUM

Key Information:

Vendor
Trend Micro
Status
Trend Micro Antivirus For Mac (consumer)
Vendor
CVE Published:
14 October 2020

Summary

Trend Micro Antivirus for Mac 2020 is susceptible to a kernel extension request attack that allows an attacker to bypass the Web Threat Protection feature. This vulnerability requires user interaction, meaning the target must visit a malicious webpage or open an infected file to initiate the attack. Awareness of this vulnerability is crucial for users to mitigate risks associated with potential exploitation.

Affected Version(s)

Trend Micro Antivirus for Mac (Consumer) 2020 (v10.x) and 2019 (v9.x)

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-09947
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-1242/
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.